Trail of Bits
Trail of Bits is a SOC 2 support firm in New York, NY, USA providing penetration testing, founded in 2012. Engineering-led and high-assurance organizations that need deep security audits of code, cryptography, blockchain, and complex systems, well beyond a standard pentest.
Free. Side-by-side on price, timeline, and fit. Pick one firm. Have one call.
Who should hire Trail of Bits?
Engineering-led and high-assurance organizations that need deep security audits of code, cryptography, blockchain, and complex systems, well beyond a standard pentest.
What makes Trail of Bits different?
A research-driven security firm (clients from Meta to DARPA) known for foundational open-source tooling and deep expertise in reverse engineering, cryptography, and exploitation.
Pricing: Trail of Bits does not publish a standard price. Pricing depends on scope, environment, and engagement model β request a quote to get a current figure.
Trail of Bits FAQ
Answers templated from this firm's directory record and preserved in FAQPage schema.
What does Trail of Bits do for SOC 2?
Trail of Bits is a SOC 2 support firm providing penetration testing. It does not issue the SOC 2 report itself; an independent CPA firm attests. Engineering-led and high-assurance organizations that need deep security audits of code, cryptography, blockchain, and complex systems, well beyond a standard pentest.
Where is Trail of Bits based?
Trail of Bits is based in New York, NY, USA, and supports SOC 2 work remotely. The firm has operated since 2012.
Does Trail of Bits publish pricing?
Trail of Bits does not publish a standard price. Pricing for penetration testing work depends on scope, environment, and engagement model, so request a quote to get a current figure.
Compare Trail of Bits with the right-fit firms
Tell us your scope and SOC 2 timeline. We send it to Trail of Bits and a couple of other firms that fit, and they reply with a ballpark. Anonymous until you pick.
Run a firm? Claim or feature this listing. Placement never reorders matching β fit comes first.